From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-1.v43.ch3.sourceforge.com ([172.29.43.191] helo=mx.sourceforge.net) by sfs-ml-3.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1UBsjX-0003bQ-0D for bitcoin-development@lists.sourceforge.net; Sat, 02 Mar 2013 20:08:39 +0000 X-ACL-Warn: Received: from mailout61.mail01.mtsvc.net ([216.70.64.9]) by sog-mx-1.v43.ch3.sourceforge.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76) id 1UBsjW-00061Q-5f for bitcoin-development@lists.sourceforge.net; Sat, 02 Mar 2013 20:08:38 +0000 Received: from mailout34.mail01.mtsvc.net ([216.70.64.74] helo=n25.mail01.mtsvc.net) by mailout61.mail01.mtsvc.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from ) id 1UBsHp-0001rC-AD for bitcoin-development@lists.sourceforge.net; Sat, 02 Mar 2013 14:40:01 -0500 Received: from 173-160-184-33-washington.hfc.comcastbusiness.net ([173.160.184.33]:59034 helo=localhost.localdomain) by n25.mail01.mtsvc.net with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from ) id 1UBsHj-0006gR-DU for bitcoin-development@lists.sourceforge.net; Sat, 02 Mar 2013 14:39:55 -0500 Message-ID: <5132558A.8040304@recessionstories.net> Date: Sat, 02 Mar 2013 11:39:54 -0800 From: webmaster User-Agent: Mozilla/5.0 (X11; Linux i686; rv:10.0.12) Gecko/20130110 Thunderbird/10.0.12 MIME-Version: 1.0 To: bitcoin list Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Authenticated-User: 885636 webmaster@recessionstories.net X-MT-INTERNAL-ID: da77627cc1395e032ff4383e87b3e98abde298c2 X-Spam-Score: 0.0 (/) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. X-Headers-End: 1UBsjW-00061Q-5f Subject: [Bitcoin-development] Secure download X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Mar 2013 20:08:39 -0000 Hi, I am a newbie trying to get my first wallet up. But I have a security/crypto background and so I know enough not to trust a http download. But I don't see any other option to download bitcoin software from sourceforge. I can check the SHA256 hashes, but how do I verify those? I am familiar with gpg. Where can I find signatures and the signing keys? Hopefully, the keys are on multiple independent servers. Or is read-only ssh/sftp/scp access possible? Thanks in advance, Chris